diff options
| author | Pekka Enberg <penberg@cs.helsinki.fi> | 2008-07-26 17:49:33 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2008-07-26 17:49:33 -0700 |
| commit | 93bc4e89c260d91576840c4881d1066d84ccd422 (patch) | |
| tree | 456176a054fc9a3fed18ac6ce50c7a34a86c5808 /net/decnet/dn_dev.c | |
| parent | 3918fed5f31213067c1c345bd904e1ea369e6819 (diff) | |
| download | linux-93bc4e89c260d91576840c4881d1066d84ccd422.tar.gz linux-93bc4e89c260d91576840c4881d1066d84ccd422.tar.bz2 linux-93bc4e89c260d91576840c4881d1066d84ccd422.zip | |
netfilter: fix double-free and use-after free
As suggested by Patrick McHardy, introduce a __krealloc() that doesn't
free the original buffer to fix a double-free and use-after-free bug
introduced by me in netfilter that uses RCU.
Reported-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pekka Enberg <penberg@cs.helsinki.fi>
Tested-by: Dieter Ries <clip2@gmx.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/decnet/dn_dev.c')
0 files changed, 0 insertions, 0 deletions